Carmakers’ Privacy Fail: Owners lack control over collected data

According to a new study, major car manufacturers acknowledge the potential sale of personal information, although they remain vague about the buyers. Additionally, half of these manufacturers state that they would share this information with the government or law enforcement without requiring a court order. This study was conducted by researchers from the nonprofit Mozilla Foundation, who emphasized that drivers have minimal control over the personal data collected by their vehicles. The proliferation of sensors in cars has turned them into significant data-collection hubs. However, security standards in this regard are undefined, which is concerning given automakers’ susceptibility to hacking.

In their latest “Privacy Not Included” survey, the Mozilla Foundation classifies cars as the worst product category when it comes to privacy. This designation surpasses other categories like fitness trackers, reproductive-health apps, smart speakers, and connected home appliances, all of which have been studied by Mozilla since 2017. Surprisingly, not one of the 25 car brands reviewed by Mozilla met the minimum privacy standards set by the organization. In contrast, 37% of mental health apps reviewed by the nonprofit this year did meet these standards.

The study reveals that 19 automakers admit to selling personal data, and half of them are willing to share this information with government or law enforcement upon “request,” without the need for a court order. Only two automakers, Renault and Dacia, offer the option for drivers to have their data deleted, although these brands are not available in North America. The researchers suspect that data brokers, marketers, dealers, and partners with installed products and services are among the potential buyers of this personal information.

This collection of personal data in cars raises concerns among researchers and technology experts, who view cars as “wiretaps on wheels.” Albert Fox Cahn, a technology and human rights fellow at Harvard’s Carr Center for Human Rights Policy, emphasizes the invasive nature of transforming cars into corporate surveillance spaces. The Alliance for Automotive Innovation, a trade group representing most car and light truck manufacturers in the United States, disputes this characterization, stating that they prioritize consumer privacy. They advocate for a federal privacy law to avoid confusion and ensure compliance with privacy rights.

In a Pew Research survey conducted in 2020, 52% of Americans admitted to avoiding products or services due to concerns about personal information collection. On the issue of security, Mozilla sets a minimum standard for car brands to encrypt all personal information. However, most brands ignored the researchers’ inquiries, and those that did respond provided inadequate answers.

Surprisingly, Japan-based car manufacturer Nissan stands out for its honesty and detailed breakdown of data collection practices in its privacy notice, in stark contrast to tech giants such as Facebook and Google. Nissan’s privacy notice reveals the collection of sensitive personal information, including driver’s license numbers, immigration status, race, sexual orientation, and health diagnoses. Nissan claims that it can draw inferences from this data to create profiles that reflect consumer preferences, characteristics, psychological trends, and more. The researchers were also surprised to find that six car companies, including Nissan, claimed they could collect “genetic information” or “genetic characteristics.” Additionally, Nissan admitted to collecting information on “sexual activity,” but did not provide an explanation.

Tesla, the all-electric car brand, ranked high on Mozilla’s “creepiness” index. According to Tesla’s privacy notice, if an owner opts out of data collection, the company may not be able to provide real-time notifications about issues that could result in reduced functionality, serious damage, or inoperability. When asked about their practices, neither Nissan nor Tesla immediately responded to inquiries.

Mozilla’s research lead, Jen Caltrider, credits laws such as the European Union’s General Data Protection Regulation and California’s Consumer Privacy Act for compelling carmakers to disclose their data collection practices. Despite the current state of car privacy, Caltrider believes that by raising awareness among consumers, a similar shift can occur as it did in the past with TV makers offering alternatives to surveillance-heavy connected displays.

Reference

Denial of responsibility! Vigour Times is an automatic aggregator of Global media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, and all materials to their authors. For any complaint, please reach us at – [email protected]. We will take necessary action within 24 hours.
Denial of responsibility! Vigour Times is an automatic aggregator of Global media. In each content, the hyperlink to the primary source is specified. All trademarks belong to their rightful owners, and all materials to their authors. For any complaint, please reach us at – [email protected]. We will take necessary action within 24 hours.
DMCA compliant image

Leave a Comment